Even when a vulnerability is serious and a fix is available, actually securing cars is more difficult than one would hope.